Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — Civil law firm 'Sabou, Burz & Cuc' : 1 k€ (2022)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- Civil law firm 'Sabou, Burz & Cuc'
- Montant de l'amende
- 1 k€
- Date de la décision
- 22 février 2022
- Fondement juridique
- Art. 5 (1) a), b), c), f), Art. 5 (2), Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Romanian DPA has fined the civil law firm 'Sabou, Burz & Cuc' EUR 1,000. The DPA launched an investigation after a client complained that the controller had published their personal data in a WhatsApp group used by several lawyers of a bar association without their prior consent. The DPA found that the controller had processed the data without a valid legal basis, as they had published the data for a purpose other than that originally agreed with the data subject.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)